GFI Software

Welcome to the GFI Software community forum! For support please open a ticket from https://support.gfi.com.

Home » GFI User Forums » Kerio Control » Port scan from Kerio Control
Port scan from Kerio Control [message #149722] Tue, 11 May 2021 09:28 Go to next message
jayqb is currently offline  jayqb
Messages: 1
Registered: May 2021
Hi, today I have found out strange event in security log. Kerio Control IPS has detected port scan coming from itself - source IP is the LAN IP of Kerio Control. Port scan was targeted at multiple workstations on the local network. Should I be worried ? The event does not repeat (at least for next 24 hours)

[10/May/2021 09:12:14] IPS: Port Scan, protocol: TCP, source: <Kerio Control LAN IP>, destination: <workstation #1 IP>, <workstation #7 IP>, <workstation #15 IP>, ..., ports: 51201, 51207, 60208, 60218, 51264, 51066, 51088, 51129, 54721, 51144, ...
Re: Port scan from Kerio Control [message #151573 is a reply to message #149722] Thu, 05 May 2022 14:32 Go to previous messageGo to next message
llopez is currently offline  llopez
Messages: 2
Registered: May 2022
I have the same problem, when reviewing the security logs, several port scans are shown from my kerio control to different destinations, this should not be normal. does anyone have an answer?

IPS: Port Scan, protocol: TCP, source: (mi kerio)xxx.xxxx.xxxx.xx, destination: 208.111.136.0, 200.55.184.78, 204.79.197.219, ..., ports: 62464, 11785, 11329, 63816, 80, 4989, 30615, 42665, 443, 58618, ...
Re: Port scan from Kerio Control [message #151575 is a reply to message #151573] Thu, 05 May 2022 18:50 Go to previous message
chrisc is currently offline  chrisc
Messages: 77
Registered: January 2022
Hi jayqb and llopez! Please have a look at our Manuals, Knowledge Base or consider Submitting a request with our technical support team for their expert advice.

Chris Contorinis
Customer Care Specialist
GFI Software
Previous Topic: Transparent automatic authentication in linux using kerberos ticket? or other option?
Next Topic: Kerio Control network scans
Goto Forum:
  


Current Time: Mon Sep 26 14:17:29 CEST 2022

Total time taken to generate the page: 0.02514 seconds